
Research
Two Malicious Rust Crates Impersonate Popular Logger to Steal Wallet Keys
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
@cjkihl/turbo-env
Advanced tools
A CLI tool and library for automatically syncing environment variables from .env
files to your Turborepo configuration.
.env
files to turbo.json
# Using npm
npm install @cjkihl/turbo-env
# Using yarn
yarn add @cjkihl/turbo-env
# Using pnpm
pnpm add @cjkihl/turbo-env
The CLI tool can be used to quickly sync your environment variables:
# Use default env files (.env.local, .env)
turbo-env
# Specify custom env files
turbo-env -e .env.production .env.staging .env
You can also use the package programmatically in your Node.js code:
import setTurboEnv from '@cjkihl/turbo-env';
// Use default env files (.env.local, .env)
await setTurboEnv({});
// Specify custom env files
await setTurboEnv({
envFile: ['.env.production', '.env.staging', '.env']
});
setTurboEnv(config: WithEnvConfig)
Synchronizes environment variables from .env
files to your Turborepo configuration.
config
(optional): Configuration object
envFile
(optional): Array of environment file paths to check in order of priority
['.env.local', '.env']
Promise<void>
Error
if no environment variables are found in any of the specified env filesError
if turbo.json
file doesn't existglobalEnv
array in your turbo.json
configurationturbo.json
Contributions are welcome! Please feel free to submit a Pull Request.
MIT
FAQs
Set environment variables for a turbo build from a .env file
We found that @cjkihl/turbo-env demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.